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FIELD OF THE INVENTION 

The present invention generally relates to network communications and, more 
particularly, to a method and system for interworking wireless local area networks 
(WLAN) with the UMTS (Universal Mobile Telecommunications System) network by 
10 making an Interworking Function in the WLAN appear to the UMTS network as a 
Serving GPRS (General Packet Radio Services) Support Node (SGSN). 

BACKGROUND OF THE INVENTION 

Universal Mobile Telecommunications System (UMTS) currently includes up to 
15 a 'third generation' (3G) mobile communications system developed within a 

framework known as IMT-2000 (International Mobile Telecommunications- 2000). 
UMTS will play a key role in creating the mass market for high-quality wireless 
multimedia communications. UMTS will enable many wireless capabilities, delivering 
high-value broadband information, commerce and entertainment services to mobile 
20 users via fixed, wireless and satellite networks. UMTS will speed convergence 

between telecommunications, information technology, media and content industries 
to deliver new services and create revenue-generating services. Compared to its 2G 
or 2.5G wireless cellular counterpart, UMTS will deliver low-cost, high-capacity 
mobile communications with data rates on the order of 2Mbit/sec under stationary 
25 conditions with global roaming and other advanced capabilities. 

One drawback of the UMTS network is high cost of spectrum and low data 
rates as compared to WLANs (Wireless Local Area Networks). It is thus 
advantageous to complement UMTS with unlicensed band, high data rate WLANS 
such as IEEE 802.11 and ETSI Hiperlan2 to save UMTS radio resources and 
30 increase the efficiency of the UMTS RAN (Radio Access Network). Interworking may 
be provided between a WLAN hotspot and a radio access network such as UMTS to 
allow a user to utilize either the WLAN or the radio access technology, or both, 
depending on the location of the user. The interworking between the WLAN and the 
radio access technology may provide the user with roaming capability as the user 
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moves between, and through, the coverage areas of the WLAN and the radio access 
technology in order to efficiently use the capabilities of the access networks. 

Therefore, a need exists for a system and method, which utilizes WLAN 
bandwidth to supplement UMTS bandwidth to increase overall performance and 

5 efficiency. A further need exists for an architecture where the WLAN coverage area 
interacts with a UMTS network through an interworking function (IWF) that 
communicates with the UMTS Serving GPRS (General Packet Radio Services) 
Support Node (SGSN) as another SGSN over a Gn interface specified by the 3GPP 
standard body. Yet another need exists for a method for seamless interfacing of 

10 UMTS with WLANs through the use of interworking. 
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SUMMARY OF THE INVENTION 

An interface for connecting networks includes an interworking function 
provided between a wireless local area network (WLAN) and a Public Mobile Land 

5 Network (PLMN) to provide communication interactions between the PLMN and the 
WLAN. The interworking function includes a dual-protocol stack, which interfaces the 
WLAN protocols and PLMN protocols to provide seamless communications between 
the WLAN and the PLMN such that an increase in available service bandwidth 
provided for users of the PLMN is maintained. 

10 A method for interfacing two wireless networks includes connecting a wireless 

local area network (WLAN) to a Universal Mode Telecommunications System 
(UMTS) network through an intra-PLMN (Public Mobile Land Network) interface. The 
WLAN is interfaced to the UMTS network by providing an interface towards the 
UMTS and the WLAN and using an interworking function such that communications 

15 received from the WLAN appear to be from another Serving GPRS (General Packet 
Radio Services) Support Node (SGSN) and communications sent to the WLAN 
appear to be from within the WLAN. 

BRIEF DESCRIPTION OF THE DRAWINGS 

20 The advantages, nature, and various additional features of the invention will 

appear more fully upon consideration of the illustrative embodiments now to be 
described in detail in connection with accompanying drawings wherein: 

FIG. 1 is a schematic diagram of a system architecture having a WLAN 
interfaced to a UMTS PLMN in accordance with the present invention; 
25 FIG. 2 is a user protocol stack diagram showing an interworking function 

interface, which creates protocol compatibility between a WLAN mobile station and a 
UMTS SGSN in accordance with one embodiment of the present invention; 

FIG. 3 is a control protocol stack diagram showing an interworking function 
interface which creates protocol compatibility between a WLAN mobile station and a 
30 UMTS SGSN in accordance with one embodiment of the present invention; and 
FIG. 4 is an illustrative diagram showing a routing area change between a 
WLAN and a UMTS PLMN in accordance with one embodiment of the present 
invention. 

It should be understood that the drawings are for purposes of illustrating the 
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concepts of the invention and are not necessarily the only possible configuration for 
illustrating the invention. 

DETAILED DESCRIPTION OF THE INVENTION 

5 The present invention provides a method and system for utilizing available 

bandwidth in wireless/radio networks. An architecture is provided where the wireless 
local area network (WLAN) coverage area interacts with a universal mobile 
telecommunications system (UMTS) network as another Serving GPRS (General 
Packet Radio Services) Support Node (SGSN) through an intra-PLMN (Public Mobile 

10 Land Network) backbone. 

A number of architectures are provided to interwork between the WLAN 
coverage area and other radio access technologies (RATs), such as UMTS. A novel 
approach is presented to assist in using any existing WLAN coverage area to 
complement UMTS networks by defining the WLAN's interworking function (IWF) as 

15 another SGSN. One advantage includes that QoS (quality of service) negotiation, 
mobility, and AAA (Authentication, Authorization and Accounting) procedures of the 
3G network are re-used. Advantageously, the present invention can work with any 
system (e.g., General Packet Radio Service (GPRS)/code division multiple access 
(CDMA) 2000) that needs to interwork with WLANs. 

20 It is to be understood that the present invention is described in terms of an 

illustrative WLAN-UMTS system architecture; however, the present invention is much 
broader and may include any wireless/radio network system(s), which are capable of 
providing telecommunication services. It should be understood that the elements 
shown in the FIGS, may be implemented in various forms of hardware, software or 

25 combinations thereof. Preferably, these elements are implemented in hardware on 
one or more appropriately programmed general-purpose devices, which may include 
a processor, memory and input/output interfaces. 

Referring now in specific detail to the drawings in which like reference 
numerals identify similar or identical elements throughout the several views, and 

30 initially to FIG. 1 , a system architecture 10 for integrating voice, data, video and other 
services over wireless/radio networks is shown. System architecture 10 is presented 
as an exemplary WLAN-UMTS environment for employing the inventive method and 
system in accordance with the present invention. Details of the individual block 
components making up the system architecture which are known to skilled artisans 
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will only be described in details sufficient for an understanding of the present 
invention. 

The present invention is illustratively described in terms of a UMTS network 12 
and a WLAN wireless network 14 (e.g., IEEE 802.1 1 (a, b, e, g) and HIPERLAN2 
5 standards may be employed by these networks). UMTS mobile network 12 (e.g., a 
third generation (3G) network) communicates with a radio access network (RAN) 8 
which comprises a Node B 11 and Radio Network Controller (RNC) 9. WLAN (14) is 
preferably connected to UMTS network (12) through an intra-PLMN (Public Mobile 
Land Network) interface. The RAN 8 in turn is attached to a Core Network (CN) 13 

10 which comprises packet based services such as a SGSN (Serving GPRS Support 
Node) 28, circuit based services, such as a MSC (Mobile Switching Center) 21 and 
gateways to other PLMNs, such as GGSN (Gateway GPRS Support Nodes) 24. 
Core network 1 3 supports connections/interfaces with public switched telephone 
networks (PSTN) 5 and the Internet 7. 

15 Other components may be included in a core network 13. For example, a 

home location register 50 may be provided which stores the home locations of mobile 
stations (MS) 40. By the present invention, network 12 (e.g., a PLMN) is interfaced to 
a wireless LAN 14 through a Gn (or Gp) interface by employing an interworking 
function 25. MS 40 connects at an access point 30, and MS 40 is seamlessly 

20 switched between WLAN 14 and UMTS 12 in accordance with the present invention 
when MS 40 roams between the radio access networks. 

WLAN interworking function (IWF) 25 bypasses the RNC 9 and connects to 
SGSN 28 (assuming packet switched (PS) services). The GGSN 24 takes care of the 
mobility for packet data, but the IWF 25 will need to communicate with the SGSN 28 

25 to provide the mobility for the handoff between the two physical layer interfaces of 
network 12 and 14. This can be achieved by implementing the Gn interface between 
the IWF 25 and the SGSN 28 as shown in FIGS. 3 and 4. The 3G SGSN 28 then 
sees the IWF 25 as a logical SGSN or pseudo-SGSN. 

The SGSN-GGSN portion may become a bottleneck in handling high data rate 

30 WLAN hotspots. In that case, another option may be that a GPRS tunneling protocol 
(GTP) tunnel 31 between GGSN 24 and IWF 25 is used only for downlink traffic 
coming from the GGSN 24 for user equipment (UE) at MS 40. For all other traffic, the 
WLAN 14 provides a common Internet access to the UE. This reduces the traffic 
through the SGSN-GGSN. 
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The WLAN 14 includes a plurality of access points 30 which are provided to 
permit wireless user equipment (UE) or mobile stations (MS) to access and use the 
WLAN. By the present invention, the IWF 25 interacts with the UMTS network 12 
over the Gn interface as another logical' SGSN in a similar fashion as when UMTS 
5 SGSNs communicate via the Gn interface. In this way, the UMTS network 12 
interfaces through IWF 25 in a WLAN environment as though the IWF 25 were an 
SGSN. 

Referring to FIGS. 2 and 3, a user plane stack and a control plane stack for a 
dual protocol stack for architecture 10 of FIG. 1 are illustratively shown. A logical 

10 SGSN or pseudo-SGSN is provided by IWF 25 to act as an interface. In this way, a 
mobile station (MS) 40 associated with a WLAN may interface with a SGSN 28 
associated with a 3G UMTS PLMN 12 in accordance with the present invention. It is 
to be understood that the protocol stacks may be modified according to specific 
applications and roaming agreement (including security features) and the stacks 

15 shown are illustrative and for the purpose of demonstrating a particularly useful 
embodiment of the present invention. FIG. 2 illustrates user (data) plane stack 
protocol while FIG. 3 illustrates control signaling stack protocol. 

As one skilled in the art would understand, the user plane stack of MS 40 in 
FIG. 2 has a dual stack (WLAN and UMTS) which includes an Applications layer, a 

20 transmission control protocol/ user datagram protocol (TCP/UDP) layer, an Internet 
protocol layer (IP), a WLAN medium access control/logical link control (MAC/LLC) 
layer and the WLAN physical layer; the UMTS part also includes the packet data 
convergence protocol (PDCP), radio link control (RLC) and MAC layers, and a 
WCDMA physical layer (PHY) . The IWF 25 transfers any data/information received 

25 from the mobile over the WLAN interface to the UMTS network over an interface 
compatible with an SGSN of a 3G UMTS system. For example, the data received 
over WLAN MAC/LLC is transferred to the UMTS SGSN 28 by IWF 25 over a 
gateway tunneling protocol for the user plane (GTP-U), UDP and an IP. Similar 
conversion is performed in the control plane. As one skilled in the art would 

30 understand, the control plane stack of MS 40 in FIG. 3 includes a Signaling 

Applications layer, a session management layer (SM), a GPRS mobile management 
layer (GMM); an RRC (Radio Resource Control) layer, a RLC/MAC layer and the 
UMTS physical layer for the UMTS interface; and over the WLAN interface: an 
adaptation layer for radio resource control (RRC) a WLAN MAC/LLC layer and a 



WO 03/105380 PCT/US03/16714 

7 

WLAN PHY layer. The adaptation layer (AL) in the MS 40 mimics the interface 
functions that correspond to the RRC sen/ice. This is necessary to reuse the session 
management (SM) and GPRS mobility management (GMM) layers of the 3G mobile 
stack even in WLAN. The IWF adaptation layer (AL) might play the role of a light 
5 RRC and transfer any control signaling information (SM/GMM messages) from the 
MS 40 received over the WLAN MAC/LLC layers to SGSN 28 over a protocol 
compatible with an SGSN of a 3G UMTS system and vice versa. As before, IWF 25 
transfers SM/MM signaling over the Gn interface to the 3G SGSN, and may be 
employed as though stack were native to the 3G network. 

10 The present invention provides at least the following advantages. The quality of 

service (QoS) negotiation, mobility, AAA procedures of the 3G network are employed 
making the entire system more efficient from the standpoint of increased bandwidth, 
quality and compatibility. The present invention can work with any system 
(GPRS/CDMA 2000) that can interwork with WLANs. 

15 Advantageously, deployed WLANs, in accordance with the present invention, 

provide needed bandwidth to maintain QoS for all users. In addition, WLAN radio 
resources may be used in the WLAN PLMN to free up radio resources of the 3G RAT 
that a user is moving out of. Communication between the UMTS network and WLAN 
of the present invention is seamless by employing an IWF to create compatible 

20 protocols and information exchange. 

Referring to FIG. 4, a diagram showing interactions between entities in a 
routing area change scenario are illustratively shown in accordance with one example 
embodiment of the present invention. The diagram shows a mobile station (MS) 40, 
a UMTS Terrestrial Radio Access Network (UTRAN) 42, a new IWF-SGSN 44 

25 (created to employ the resources of a WLAN), an old 3G-SGSN 46, a GGSN 24, a 
new mobile switching center/visitor location register (MSC/VLR) 48, a home location 
register (HLR) 50 and an old MSC/VLR 52. In this scenario, MS is moving into a high 
traffic area (hot spot) where a UMTS network's resources are heavily loaded. The 
system employs the WLAN (IWF) to more efficiently use the resources of the UMTS 

30 network by supplementing its capabilities with the WLAN. The IWF is referred to as 
IWF 25 (FIG. 1), and the IWF-SGSN 44 (FIG. 4) is employed to indicate the system's 
interface location. These terms are synonymous and may be readily interchanged. 

In step 101 , a routing area update request is made by MS 40 to the IWF-SGSN 
44. If MS is in packet mobility management (PMM) idle, IWF-SGSN 44 makes a 
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context request over the Gn interface to old 3G SSGN 46 in step 102. If in idle mode, 
SGSN 46 provides a context response to IWF-SGSN 44 in step 105. If MS 40 is in a 
PMM (Packet Mobility Management) connected mode, an SRNS (Serving Radio 
Network Subsystem) context response is made to UTRAN 42 in step 103 and a 
5 response is sent back to 3G-SGSN 46 in step 1 04. 

Security functions may be handled between MS 40 and IWF-SGSN 44 in step 
106. WLAN procedures may be employed here. Additional security procedures may 
be provided in step 107 to authenticate the new IWF-SGSN 44. These security 
measures are optional since authentication of the old SGSN 46 may preclude the 

10 need to re-authenticate the new IWF-SGSN 44. In step 108, a context 

acknowledgement is sent from IWF-SGSN 44 to SGSN 46. In step 109, IWF-SGSN 
44 sends an update packet data protocol (PDP) context request to GGSN 24, which 
updates its PDP context fields and responds with an update PDP context response in 
step 110. Thus, the GTP (user and control plane) tunnels are established between 

15 the GGSN and IWF-SGSN 44 for subsequent data/signaling transfer between the 
WLAN and UMTS networks. 

In steps 1 1 1-120, the new SGSN (IWF 25) 44 informs the HLR 50 of the 
change of SGSN by sending Update Location (SGSN Number, SGSN Address, and 
International Mobile Subscriber Identification (IMSI)) to the HLR 50. Requests, 

20 responses and acknowledgements are performed. Steps 1 1 1 and 114 perform a lu 
(interface between RNC and SGSN) release sequence when MS 40 sends an explicit 
signaling connection release to UTRAN 42 upon being validated by the old SGSN 46 
in steps 102-105 depending on a Packet Mobility Management (PMM) state of MS 
40. A similar procedure is performed to update location in the visitors location 

25 register VLR between an old VLR/MSC 52 and a new VLR/MSC 48. Steps 120-125 
provide this update sequence. 

The new SGSN (IWF) 44 may not implement a Gr interface (an interface 
between an HLR and an SGSN) with HLR 50 and so (to reduce the complexity of the 
IWF), in this case, steps 1 1 1-126 and 129 may be skipped. In step 126, a location 

30 update accept is sent to IWF SGSN 44 from the new VLR/MSC 48. The routing area 
change is updated, accepted in step 127 and completed in step 128. In step 129, 
PTMSI (Packet Temporary Mobile Subscriber Identity) reallocation may be performed 
and completed if needed. 
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The method as described with reference to FIG. 4 illustratively describes the 
following scenarios. 

Mobility 

1. UMTS to WLAN Entry 

5 If the UMTS SGSN covers one routing area (RA) and the WLAN coverage area is 
another RA, the WLAN IWF can broadcast the new routing area identifier (RAI) (pre- 
allocated by the UMTS network). By comparing the RAI stored in user equipment 
(UE) or mobile station (MS) in GPRS Mobile Management (GMM) context with the 
RAI received from the IWF, the MS or UE detects that an RA update (inter-SGSN) 
10 needs to be performed. The procedure is described with reference to FIG. 4. For an 
Inter-SGSN RA update, the new SGSN (IWF) informs the HLR of the change of 
SGSN by sending Update Location (SGSN Number, SGSN Address, and 
International Mobile Subscriber Identification (IMSI)) to the HLR. Three scenarios are 
illustratively described below: 

15 Case 1 : The IWF 25 may employ a Gr interface with the HLR 50 in which case all 
the steps in FIG. 4 may be followed. 

Case 2: The new SGSN (IWF) 44 does not implement the Gr interface towards 
HLR 50 and so step 1 1 1 of sending location update to the HLR 50 by the IWF 25 
along with steps 112, 1 15-126 and 129 are skipped. The lu release sequence in 

20 steps 113 and 114 happen when the MS/UE 40 sends an explicit signaling 

connection release to the UTRAN 42 upon being validated by the old SGSN 46 in 
steps 102/105 or steps 103/104 depending on the PMM state of the UE. Since 
the GGSN 24 is updated with the new SGSN (IWF) 44 through an update PDP 
context request/response, the UE's PDP context is updated within step 109/1 10. 

25 All the uplink and downlink packets shall now be sent conveniently between 

GGSN 24 and IWF 44 and the skipping of the HLR location update will not cause 
any problems. 

Case 3: IP based Diameter authentication from a HSS (Home Subscriber Server) 
may be implemented between an IWF 25 and HLR 50 in the future and standard 
30 procedures for inter-SGSN relocation can transpire. 

2. WLAN to UMTS Entry 
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Upon re-entry into the UMTS network, the UE again performs an inter-SGSN 
routing area update and repeats the method of FIG. 4, except that this time the new 
SGSN is the UMTS SGSN while the old SGSN are the IWF. 3G security procedures 
are preferably implemented to re-validate the UE when it goes back to the UMTS 
5 network. Since going into the WLAN, the IWF may not have updated the HLR and the 
UMTS SGSN marked in its context that a Mobile Switching Center (MSC)AZisitor 
Location Register (VLR) association, the information in the GGSNs and the HLR are 
invalid, when the MS initiates a routing area update procedure back to the UMTS 
SGSN, it triggers the MSC/VLR, the GGSNs, and the HLR information in the UMTS 
10 SGSN to be updated/validated. 

Again, the three cases mentioned above are employed to illustrate different 
scenarios: 

Case 1 : The IWF 25 may employ a Gr interface with the HLR 50 in which case all 
the steps in FIG. 4 may be followed. 

15 Case 2: Since while going into the WLAN, the IWF 25 had not updated the HLR 50 
and the UMTS SGSN 46 marked in its context that the MSCA/LR 52 association and 
the information in the GGSNs 24 and the HLR 50 as invalid, when the MS 40 initiates 
a routing area update procedure back to the UMTS SGSN 46, it triggers the 
MSCA/LR 52, the GGSNs 24, and the HLR 50 information in the UMTS SGSN 46 to 

20 be updated/validated. 

Case 3: IP based Diameter authentication from the HSS may be implemented 
between an IWF and HLR in the future and standard procedures for inter-SGSN 
relocation can transpire. 

Security 

25 It is assumed that an MS has been authenticated by the UMTS network before 

it moves into a WLAN coverage area. The IWF 25 will implement 3G procedures to 
authenticate the UE. In steps 102/105 in FIG. 4, if the MS 40 was in PMM-IDLE state, 
the IWF (new SGSN) 44 sends an SGSN Context Request message (old P-TMSI, old 
RAI, old P-TMSI Signature) to the old SGSN 46 to get the mobility management (MM) 

30 and packet data protocol (PDP) contexts for the MS 40. The old SGSN 46 validates 
the old P-TMSI Signature and responds with an appropriate error if the signature 
does not match the value stored in the old SGSN 46. The IWF 25 can be attached to 
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the 3G intra-PLMN backbone and need not re-authenticate the UE 40 with the HLR 
50 upon entering the WLAN 14 if the old SGSN 46 validates the UE 40. The UE 40 in 
PMM-CONNECTED state entails the sending of a Relocation Command message to 
the source SRNC by the old SGSN 46 followed by a Forward SRNS Context (RAB 
5 Contexts) message to the new SGSN (IWF) 44 via the old SGSN 46, which is again a 
validation of the UE 40 by the UMTS SGSN 46. 

However WLAN security procedures should be implemented so that the MS 40 
sends ciphered P-TMSI, old RAI, old P-TMSI Signature, and other parameters to the 
IWF (new SGSN) 44, which can then send them to the old 3G SGSN 46. 

10 The IWF has interfaces towards both WLAN and UMTS networks. It listens to 

the mobile's data and signaling on the WLAN interface (if co-located with Access 
Point) and forwards the relevant signaling (SM/GMM related) and data to the 3G 
SGSN over the Gn interface. However only limited functionality of a UMTS SGSN 
actually needs to be incorporated in the IWF. More specifically, the IWF would need 

15 only the Gn interface towards the 3G SGSN/GGSN. Other SGSN interfaces such as 
Gr etc. need not be implemented in the IWF making it simple. The Gn interface helps 
the IWF to do session management, mobility management and AAA functions by 
reusing the 3G procedures. The mobile's adaptation layer sends the SM/GMM 
signaling over the WLAN interface to the IWF adaptation layer which then sends out 

20 the SM/GMM messages to the 3G SGSN/GGSN over the Gn interface. 

Thus, the present invention preferably maintains mobility and AAA procedures 
of the 3G network. The service provider needs only one point of attachment to serve 
the 3G network as well as the connected WLANs helping the provider retain tight 
control over the customer base in the WLAN as well. The simple IP-based Gn 

25 interface of the SGSN may be implemented in the IWF towards the SGSN making the 
present invention scalable. As described earlier, the other complex SGSN interfaces 
such as Gr (towards HLR) etc. can be skipped. The PDP addresses are still 
allocated by the same GGSN while the terminal (MS) is in the WLAN making MM 
easier. 

30 In present UMTS networks, the data is encapsulated using GTP-U from GGSN 

to SGSN and then again from SGSN to RNC requiring more processing time. The 
present invention also has the advantage that the dual GTP encapsulation as in the 
UMTS network (GGSN-SGSN and then SGSN-RNC) is avoided since only the 
GGSN-IWF encapsulation part is done in the WLAN coverage area as the data is 
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forwarded from the GGSN directly to the IWF and vice versa as shown in FIG. 1). 
Advantageously, no modifications to the existing UMTS network nodes are required 
for the interworking architecture of the present invention. Still further advantages 
include using an RA update timer that can be set to a large value upon the MS 
5 entering the WLAN RA so that frequent RAUs are avoided resulting in conservation 
of battery power. In addition, WLAN radio resources are preferably used in the 
WLAN coverage area freeing up the radio resources of the RAT (3G) that the UE is 
moving from into the WLAN. 

The present invention provides a dual stacked mobile and an IWF which 

10 employ an adaptation layer (AL), which enables the ability to use existing SM/GMM 
procedures from the mobile to the 3G SGSN for Session and Mobility management. 
This advantageously provides seamless handover between two networks. Re-use of 
the mobility management, session management, authentication scheme specified in 
a UMTS system when a user moves into a WLAN coverage area guarantees the 

15 service level be maintained during user's handover. 

Having described preferred embodiments for wireless local area network 
(WLAN) as a logical serving GPRS (general packet radio service) support node 
(SGSN) for WLAN/universal mobile telecommunications system (UMTS) interworking 
(which are intended to be illustrative and not limiting), it is noted that modifications 

20 and variations can be made by persons skilled in the art in light of the above 
teachings. It is therefore to be understood that changes may be made in the 
particular embodiments of the invention disclosed which are within the scope and 
spirit of the invention as outlined by the appended claims. Having thus described the 
invention with the details and particularity required by the patent laws, what is 

25 claimed and desired protected by Letters Patent is set forth in the appended claims. 



